How to identify if your car is impacted by SFD2

[tracktoy]

As I am sure you are aware VAG have introduced a new security feature on top of the existing SFD protection.

This variant begins with some vehicles from model year and will also affect new models from model year 2024.

If you would like to read the detailed information about UNECE R155 & R156, you can do so on the UN website.

UN Regulation No. 155 - Cyber security

UN Regulation No. 156 - Software update

Vehicle list SFD2 (as of February 22, 2024)

The following vehicles are currently known to be protected by SFD2:

VW Touareg (CR) facelift from model year 2024
VW Passat B9 (CJ) from model year
VW Tiguan (CT) from model year 2024
VW ID.7 (ED) from model year 2024
Audi Q8 e-tron (GE) from model year 2024
Audi A6 Avant (F2) from model year 2024
Audi e-tron GT (FW) from 2024

But this list will expand.

The .rod file on VCDS is the same as the ODX File name that you can find in Info on the OBD11 App.

Please remember not all control units will be impacted by this change but if your ODX File name

Confirmation of the above from OBD11 Support

Renatas from OBDeleven​

14:27 (2 hours ago)

Hello, Thank you for getting back to me. I was informed that the SFD2 protected vehicles control unit ODX name has the ending of "UNECE". You can check that by going to your vehicle's Gateway 19 control unit > About > check the ODX name if it has the keyword.

 

[tracktoy]

And just to update this thread I have seen this post today on the OBD11 Forum

Thanks to BRKICA

After discussions with retrofitters and VW engineers, here is what I know about SFD2:

- SFD2 was implemented as a result of passing stricter EU legislations for vehicles. The legislations in question are: UNECE R155 (Cyber Security and Cyber Security Management System [CSMS]) & UNECE R156 (Software Update and Software Update Management Systems [SUMS])

- SFD2 does not work like SFD. A SFD2 token is a two part authentication token - release is granted if a part of the token stored on your cars unit matches with the half stored on VW servers. It is possible that a 3rd party will never be able to unlock an SFD2 protected unit as they would require unprecedented access to VW databases... I don't know if VW will go for that. But, VW likes money, so given time we might get SFD2 capable 3rd party diagnostics, but for sure it won't be cheap...

- Even for online ODIS, some changes cannot be done - my colleague with dealership access rights to ODIS had issue disabling ISA (Intelligent speed assist) on a Golf 8 FL. I assume it will be the same for disabling other "safety features" due to stricter regulatory pressures on VW from the legislative body of the EU to have them active.

- Even with ODIS you need to pay a "session fee" to log into a SFD2 protected unit. It is a true money drain. One coding session (per unit) is cca 130 euro + VAT. Now imagine coding a feature spread across several units...
- Adding or swapping SFD2 protected units might not be possible - for an unit not originally fitted to the car, the SFD2 tokens on the unit and VW server won't match, possibly blocking parametrization of the unit.

So guys, if you like to work on your car it's is best to stick to the pre-SFD2 models. Might take a while before we can do anything to the new cars.

 

[cairus]

There are already several third-party providers that can open SFD 2, for example Bosch Esitronic with KTS 560.

 

[tracktoy]

I would agree there are some tools that can do it but we are talking thousands of euro's to buy and yearly license so not the sort of tool most people on this site would use.

I am also unclear i the tools work on there own or you need a Geko account or some other access to VAG Servers.

 

[cairus]

Yes, you need a Bosch-Single-Key-ID to login and authenticate you on VAG Servers.

 

[tracktoy]

Update from obd11 today

What is SFD2 unlock? | OBDeleven

New VW Group cars (2024+) introduced a stricter security layer called SFD2. Learn what it is, why it matters, and OBDeleven’s solution progress.

obdeleven.com

Still not sorted but it sounds like we might get something this year fingers crossed.

So, when will SFD2 unlock be available?​

We know how highly anticipated this feature is for both drivers and workshops, which is why it’s one of our top priorities. We’re actively working on ways to collaborate with Volkswagen Group to deliver a reliable, well-built solution. Any future availability of SFD2 will depend on Volkswagen Group authorization and technical feasibility.


While we can’t share a timeline just yet, we’re hopeful to have good news soon. If you want to be informed as soon as updates are available, don’t forget to drop your email right here:

so go to the blog and enter you details if you want to be updated when SFD2 is open. On a personal note I am fully expecting this will only work on the NEW OBD11 App and not on the VAG One. Why do I think this because why would a developer do two lots of work with one being on an app they are going to close down. Hopefully I am wrong but time will tell.

 

[cairus]

VC Tool can do everything except the online verification, which is done externally. After verification, the verified file can be read, and the coding/adaptation can then be carried out. I'm currently working on finding someone who can verify the file online with the manufacturer. However, the manufacturer ultimately decides whether or not they approve the change.

 

[tracktoy]

Yes but again VC Tool is not a cheap hobbiest tool but to be even handed we don't know how much OBD11 are going to charge in the end and if it's limited to latest dongle

 

[cairus]

Is OBD 11 cheap by ultimate Account? I have ultimate VC Tool for 280€ one year

 

[tracktoy]

OBD11 Pro account is Eur 140 including the dongle and some credits and as I still have lifetime pro no yearly costs. Ultimate account is of no use to average user as it does not offer great extra functionality in my view. Next year the Pro License is Eur 60 for one year, Eur 110 for two years or Eur 150 for three years.

VC Tool is 300 plus V.A.T for new user and needs extra cost for SFD Token Generation and extra cost for the SFD2 Process plus if I have read it correctly. a Windows Computer and some sort of interface device (no cost shown).

VC Tool is a much more professional tool no doubt and has many many features that OBD11 Does not but for the average user who wants a small number of changes using a mobile device I still think its much cheaper and probably easier to use (for the limited use cases).